Skip to main content
SSH app icon

SSH

This app supports executing various endpoint-based investigative and containment actions on an SSH endpointBuilt by Splunk LLC
soar product badge
Default Version 3.0.0

July 22, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3, 6.2

Rating
5
(1)

Log in to rate this app

Support
Splunk Supported
Ranking

#3 in Endpoint

This app supports executing various endpoint-based investigative and containment actions on an SSH endpoint

Supported actions

  • test connectivity: Validates endpoint connection
  • execute program: Executes a program on the remote machine
  • list connections: Lists all the network connections. Requires root privileges. Requires netstat to be installed
  • block ip: Add an iptables rule to the Linux server. Requires root privileges. Not supported on OS X
  • list firewall rules: Lists the rules in iptables. Requires root privileges. Not supported on OS X
  • delete firewall rule: Delete a firewall rule. Requires root privileges. Not supported on OS X
  • reboot system: Reboot the endpoint (Requires root privileges)
  • shutdown system: Shutdown the endpoint(Requires root privileges)
  • terminate process: Terminate a process (Requires root privileges)
  • logoff user: Logout a user on endpoint (Requires root privileges)
  • list processes: List processes on endpoint
  • get disk usage: Retrieve disk usage from endpoint
  • get memory usage: Retrieve memory usage from endpoint
  • get file: Retrieve a file from the endpoint and save it to the vault
  • put file: Put a file from the vault to another location